A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcrymdgetalgodlen(), it may allow an invalid HMAC to be accepted by the Booth server.
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-42530.json"